Yeah, terrible timing. A CNAME record conflicted with our new SSL cert - renewing the cert forced us off VIP on to SNI (per GAE's deprecation schedule for VIP) and the CNAME we had in place for VIP then prevented DNS from resolving properly - at least that's what I think happened ! (videopixie engineer :)